Discover ING Tech
ING Tech Romania is ING’s global hub for technology established in 2015. Focused on building strategic key capabilities, the hub provides approximately 121 services for 24 ING units globally.
These services are grouped in the following main categories : software development; data management; non-financial risk & compliance and audit.
Now, in 2021, our fast-growing organization gathers more than 1000 high-performing engineers and non-financial risk & compliance specialists that work together in global tribes.
Area of responsibility
Touchpoint Platform is part of ING’s Think Forward strategy to become a truly global bank. It is a strategic program that that aims to provide a globally scalable banking platform by simplifying and standardizing our banking applications and creating a modularly built system.
The Touchpoint Architecture Platform uses an API Gateway for 'external' client applications to access the TPA platform API's.
API Security defines how the APIs of the Touchpoint Architecture are protected and can communicate between each other in a secure and scalable way.
The target state for the Touchpoint Architecture is that all APIs within ING across all countries, can communicate with each other with little restrictions within the platform.
Systems which are outside of the Touchpoint Platform (Security Boundary) will use the API Gateway to access APIs within the platform.
The API Gateway will handle all Client Application-specific security measures (like CORS, CSRF, JSON Busting for browsers and SRP channel for Mobile, etc) to avoid APIs to have to implement these themselves.
Your Day-to-Day :
Who we are looking for?
The products our team delivers are not only the authentication proxy for all internet channels in the Netherlands and Belgium, but also various authentication components.
These are the target TokenAPI and legacy authenticating applications. Furthermore, we deliver security components, which are reused in the ING developer frameworks to verify users, extract user information and provide secure API to API communication.
What you bring to the team :